Finding hidden directories and files is a fundamental step in any security assessment, and ffuf (Fuzz Faster U Fool) has quickly become the…

One of the important vulnerabilities in API security is Unrestricted Resource Consumption. It is categorized as API4: Unrestricted Resource…

Aryaka Threat Labs exposes BlackSanta, a Russian-linked malware targeting HR teams with fake resumes to deploy an EDR-killer and steal crypto wallets.

In the world of web development, the “Live Preview” button is a staple for content editors—a harmless way to see how an article looks before it goes live. However, a newly discovered v…

Qualys discovers CVE-2026-3888, a critical Local Privilege Escalation (LPE) flaw in Ubuntu Desktop. Learn how a 30-day time window exposes root access.

Introduction

Hello, Cybersecurity enthusiasts and white hat hackers !

The framework that helps security analysts understand what was attacked, and how to respond.

The field is not just "hacking." There are 10+ careers inside cybersecurity, and choosing the wrong starting point is the #1 reason people…

Cybersecurity is no longer just about theory — it’s about real-world skills. With cyberattacks increasing globally, organizations and…

One command. Full recon. AI-powered attack paths.

The Asia Pacific Penetration Testing Market is witnessing substantial growth, projected to rise from USD 0.42 billion in 2025 to USD 1.04…

In this challenge, we were tasked with investigating a web application where the developer had disappeared without sharing the source code.

Ruang CTF “Attacktive Directory” di TryHackMe dirancang untuk mengajari pengguna cara mengeksploitasi kerentanan umum di lingkungan Windows…

Room: https://tryhackme.com/room/missingperson

A new ClickFix scam tricks Windows users into running hidden commands that map hacker-controlled drives and load malware through trusted apps.

In a sophisticated new campaign active since late 2025, a mysterious threat actor has been turning the internet’s most basic security tool—the human verification challenge—into a gateway for high-…

SolarWinds. Ivanti. SysAid. ManageEngine. Giants of the KEV world, all of whom have ITSM side-projects.

ITSMs, as a group of solutions, have played pivotal roles in numerous ransomware gang campaigns - not only do they represent code running on a system…

Alongside building Myrad, I still spare weekends on independent security research and this turned out to be one of my best findings, on a…